turbot/tailpipe-mod-apache-access-log-detections

Benchmark: Remote Command Execution (RCE) Detections

Description

This benchmark contains RCE focused detections when scanning access logs.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/tailpipe-mod-apache-access-log-detections

Start the Powerpipe server:

powerpipe server

Open http://localhost:9033 in your browser and select Remote Command Execution (RCE) Detections.

Run this benchmark in your terminal:

powerpipe benchmark run apache_access_log_detections.benchmark.remote_command_execution_detections

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run apache_access_log_detections.benchmark.remote_command_execution_detections --share

Detections

Tags